2015-02-18
Old-skool usernames in ssh attacks
Attention: this item is more than 5 years old, links can be broken and information can have been updated.
Somebody dug up some 'hacking VMS' howto files I guess:Feb 17 21:53:25 greenblatt sshd[8483]: Invalid user OPERATOR from 201.48.89.105 Feb 17 22:00:43 greenblatt sshd[9138]: Invalid user RSBCMON from 117.239.42.90 Feb 17 22:09:54 greenblatt sshd[9962]: Invalid user FIELD from 189.56.109.19 Feb 17 22:18:39 greenblatt sshd[10837]: Invalid user MANAGER from 203.76.136.147 Feb 17 22:35:21 greenblatt sshd[12290]: Invalid user SYSDBA from 117.253.182.184Some of the old 'default accounts' from way back! HACKING VAX'S VMS. at textfiles.com